
$ rpki-client -vvf rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
File: 06083035B4010CEC337EE26F5EA15A04DD209219.mft (raw, json)
Hash identifier: h7HMTU/tAl/edTO8wXCyEnagI7lpyD27/kaWwTIG6iQ=
Subject key identifier: AD:06:55:0D:34:A9:C1:1F:91:51:FB:4F:1A:21:36:84:61:3F:F2:A0
Authority key identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
Certificate issuer: /CN=06083035B4010CEC337EE26F5EA15A04DD209219
Certificate serial: 5559692FE7F64C0769D13BC340DE0F8F1DC17095
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 23:42:47 +0000
Manifest this update: Tue 16 Jun 2026 23:37:47 +0000
Manifest next update: Thu 18 Jun 2026 00:44:47 +0000
Files and hashes: 1: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: ziG1A6Oi8LeUJ0pFcFc03n/VrStN2lfnk92bw36q/aI=)
2: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: ILzJvkloOZdmChaklTC1z8yHQQ79CFcrInsypXVfRQY=)
3: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: hu61kA8y8+AVvATIk7KwJvKK9QvDhjlP6nmM1pXjVy4=)
4: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: PCIebsIX9snQ/16KTknT7n3JoWYoLSW34RbZ1h8yq10=)
5: 06083035B4010CEC337EE26F5EA15A04DD209219.crl (hash: 27hTF2UrrB3skgT07YRtR78q2c6pQ5OF/UHcP60jHTE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:59:69:2f:e7:f6:4c:07:69:d1:3b:c3:40:de:0f:8f:1d:c1:70:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06083035B4010CEC337EE26F5EA15A04DD209219
Validity
Not Before: Jun 16 23:37:47 2026 GMT
Not After : Jun 18 00:44:47 2026 GMT
Subject: CN=AD06550D34A9C11F9151FB4F1A213684613FF2A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:d8:45:42:3a:2b:bc:c5:eb:0c:00:65:b7:
8a:27:72:47:36:7b:2b:65:fb:27:50:54:f1:67:72:
51:54:45:bd:eb:42:04:93:39:bb:be:13:d2:04:a7:
d6:0d:7d:19:e2:45:09:95:ab:d4:56:d2:d9:47:f7:
b6:c5:73:3e:62:23:46:73:0b:f5:03:b2:88:f1:41:
33:5d:e9:32:79:77:5b:bb:24:dd:79:5b:d6:99:d0:
8d:5b:fa:e5:37:31:86:e1:01:48:45:4b:29:53:50:
07:3e:f8:24:50:b6:46:74:d8:1f:46:b9:49:a1:19:
67:fe:c2:e7:b6:8c:35:34:90:fa:50:68:72:36:a0:
3c:28:23:ce:79:1d:a1:67:7f:44:c4:e6:b1:33:e6:
a3:92:f3:ac:ee:59:98:47:77:6e:5d:ca:c0:e5:b8:
81:ea:f7:a8:68:31:01:9c:9d:84:0f:54:3d:b1:f4:
da:65:75:ff:2e:37:89:79:b7:49:d2:cd:16:8e:51:
1c:45:06:8b:59:65:7e:a4:ff:c4:58:a9:97:de:b7:
b7:ea:33:d8:39:c1:ad:cf:eb:58:54:6e:11:24:0d:
41:25:ce:56:bb:f0:82:d9:df:9c:fe:cd:e3:12:c7:
61:22:d2:1e:eb:16:ae:7d:67:4c:62:68:f9:dd:b2:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:06:55:0D:34:A9:C1:1F:91:51:FB:4F:1A:21:36:84:61:3F:F2:A0
X509v3 Authority Key Identifier:
keyid:06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c5:fa:75:7a:a4:3b:49:42:67:66:9c:b2:64:a0:be:c3:2b:
dc:45:33:f7:e8:d4:30:a0:9c:a0:e2:77:42:50:b6:ae:b0:e0:
29:34:5c:78:66:4a:75:5a:10:42:80:ab:41:05:83:da:69:0a:
4d:62:2d:9f:72:a2:58:03:81:9f:01:e1:c2:50:8e:11:f0:b9:
50:29:96:06:df:c1:3c:1b:ba:4b:f2:30:6e:6c:bd:52:1b:d0:
35:19:2d:7f:f9:b8:45:25:6a:04:9f:b7:96:04:e8:df:9c:7b:
6e:c1:11:6d:cf:3f:ba:82:d4:62:16:0f:59:b5:b0:b3:05:f6:
9c:a2:46:83:e3:1f:ef:f4:e8:56:32:2d:ae:78:c7:9f:c9:0e:
02:fb:0d:ad:0f:aa:7e:52:2d:df:a7:9a:8b:b4:e8:75:a7:71:
20:f0:f6:d9:49:39:2e:67:43:2e:08:ff:93:0a:c0:2b:bc:dd:
87:1d:92:43:10:4a:22:30:6e:13:b8:54:e6:21:34:25:b8:d7:
d6:bb:ce:25:d8:59:cc:49:7e:30:cd:55:be:03:a5:5d:c0:38:
47:b6:f9:cb:f3:59:ea:66:fc:2b:8a:eb:23:27:12:79:2d:d7:
be:96:5f:3b:df:01:65:5e:f3:0f:81:1d:2e:f1:a5:c7:b3:62:
99:75:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:13:36 2026 by rpki-client